DNSSEC

Implementing DNSSEC using Bind

Modifying a Signed Zone

All signed zones are located in /var/named/dnssec_zones. To modify a
signed zone, simply modify the unsigned zone file in the same directory
(e.g. /var/named/db.domain.gov), increment its time-stamp then sign
the zone again with the existing keys using the following commands: